Hello. Looks fine, but somewhat disconcerting / confusing to see 450
commits from Jia Tan on upstream v5.6.2 and 630 on debian/unstable and
debian/5.6.2-1 in https://salsa.debian.org/debian/xz-utils as a result
of merge commit 6bd3e4a.
On Fri, 25 Oct 2024 08:00:22 +0200 Sebastian Andrzej Siewior
<sebast...@breakpoint.cc> wrote:
> On 2024-10-24 23:38:31 [+0200], Thorsten Glaser wrote:
> > Do we trust these newer versions now?
>
> Yes. We started with 5.6.2 which was audited by upstream after the
> malicious party left.
>
> Sebastian
>
>
